$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/688B6F18355811F0AF79910EC4F9AE02.roa File: 688B6F18355811F0AF79910EC4F9AE02.roa (raw, json) Hash identifier: jEiZeVVR7YqvSOsTkuwgvg/YfncERr5FCAvit7Yi2lw= Subject key identifier: 20:65:DA:AF:FF:3B:A1:44:27:F2:53:81:4D:36:48:A3:85:29:F8:72 Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 02C2 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/688B6F18355811F0AF79910EC4F9AE02.roa Signing time: Mon 20 Jul 2026 15:50:48 +0000 ROA not before: Mon 20 Jul 2026 15:50:47 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141780 IP address blocks: 103.243.179.0/24 maxlen: 24 2001:df6:3480::/47 maxlen: 47 2001:df6:3481::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Jul 20 15:50:47 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a5e43d7-dabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:99:2e:0c:38:3a:f1:35:88:f0:64:75:92: 93:23:ef:85:80:a2:c7:25:17:dc:0b:14:77:24:cc: 91:13:60:b3:56:b5:8b:43:31:e4:2b:92:f5:44:2a: 3c:0d:30:cb:f2:81:eb:be:09:da:37:19:73:35:28: 84:72:d3:3e:cf:bb:81:73:3f:3a:b3:d9:d0:8d:dc: 47:27:02:f7:ee:97:5e:dc:5f:02:95:05:23:17:c0: 73:0e:24:78:2d:aa:bf:5a:db:7a:0d:97:58:a3:81: 80:e3:8f:30:57:9b:75:a2:96:fd:de:5e:89:60:8e: 32:0a:d2:16:81:ab:c5:45:23:69:9d:f5:41:15:5f: fa:ef:38:be:ae:08:20:96:57:25:aa:e0:c1:f2:58: fe:fd:05:00:81:92:c8:83:5a:bc:5d:e4:7c:d4:f1: c0:b7:ed:4e:6c:98:ea:6e:2a:54:0f:51:f7:f4:41: 91:18:b1:b2:cb:73:06:aa:3b:ac:13:a1:27:8b:95: 5f:f5:df:8a:ec:5a:86:01:91:07:e1:b0:e8:a5:b6: 7d:4a:60:44:6c:c3:a0:aa:8a:da:69:4c:50:32:62: 88:d2:6b:0c:e4:dd:20:d3:b3:2c:e8:f7:a6:97:38: 14:99:5d:68:02:0a:00:17:52:b3:bd:d9:31:11:75: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:65:DA:AF:FF:3B:A1:44:27:F2:53:81:4D:36:48:A3:85:29:F8:72 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/688B6F18355811F0AF79910EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.243.179.0/24 IPv6: 2001:df6:3480::/47 Signature Algorithm: sha256WithRSAEncryption 73:c8:76:0f:42:dd:43:95:21:e3:a4:40:fa:05:5a:f3:fa:93: dc:9e:b7:31:c2:41:61:bb:da:58:6d:7f:15:45:5e:47:72:fd: 38:c3:e2:66:63:3d:cb:b1:4d:71:cf:ce:d1:70:cc:20:c5:38: 38:1f:62:27:43:75:a8:67:8b:26:b6:20:6b:d2:f8:9b:e3:71: 20:e0:8a:a9:3c:a3:1e:ed:c5:b5:2d:b9:5f:01:f9:bf:88:43: 64:9a:65:96:fb:f7:30:48:33:ce:1f:27:76:f9:0e:a4:2c:b5: 34:57:ed:f4:ab:3c:59:36:64:d7:16:f0:57:13:72:61:f0:d3: 1b:da:8c:e3:db:69:46:94:c5:aa:84:b6:1e:69:23:9d:67:8d: 68:ec:87:b4:2f:f7:78:2e:3f:71:42:38:4f:81:36:9c:67:60: 7d:20:d0:33:f8:ef:59:86:a1:74:2b:76:9b:ae:34:25:77:9d: 8b:37:a3:0c:20:aa:4d:5f:a7:72:d9:9b:c7:fc:28:ed:12:f1: ed:05:96:68:27:1b:a8:a2:84:41:7e:88:b9:63:a2:6e:f1:db: 53:d6:ea:0d:6c:f4:17:19:72:51:c8:a9:5a:38:61:a9:74:b4: ee:99:db:be:d2:4f:a4:fe:92:84:64:d9:04:c3:ce:d7:be:6c: 63:d3:53:53 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjYwNzIwMTU1MDQ3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNDNkNy1kYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0niZLgw4OvE1iPBkdZKTI++FgKLHJRfcCxR3JMyRE2CzVrWLQzHkK5L1RCo8 DTDL8oHrvgnaNxlzNSiEctM+z7uBcz86s9nQjdxHJwL37pde3F8ClQUjF8BzDiR4 Laq/Wtt6DZdYo4GA448wV5t1opb93l6JYI4yCtIWgavFRSNpnfVBFV/67zi+rggg llclquDB8lj+/QUAgZLIg1q8XeR81PHAt+1ObJjqbipUD1H39EGRGLGyy3MGqjus E6Eni5Vf9d+K7FqGAZEH4bDopbZ9SmBEbMOgqoraaUxQMmKI0msM5N0g07Ms6Pem lzgUmV1oAgoAF1KzvdkxEXUkrQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCBl2q// O6FEJ/JTgU02SKOFKfhyMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE5QkMvQkUyQ0VGRjBCM0FBMTFFREFGMzE2MjNGQzRGOUFFMDIvNjg4QjZGMTgz NTU4MTFGMEFGNzk5MTBFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ/OzMA8EAgACMAkDBwEgAQ32NIAwDQYJKoZIhvcNAQELBQADggEB AHPIdg9C3UOVIeOkQPoFWvP6k9yetzHCQWG72lhtfxVFXkdy/TjD4mZjPcuxTXHP ztFwzCDFODgfYidDdahniya2IGvS+JvjcSDgiqk8ox7txbUtuV8B+b+IQ2SaZZb7 9zBIM84fJ3b5DqQstTRX7fSrPFk2ZNcW8FcTcmHw0xvajOPbaUaUxaqEth5pI51n jWjsh7Qv93guP3FCOE+BNpxnYH0g0DP471mGoXQrdpuuNCV3nYs3owwgqk1fp3LZ m8f8KO0S8e0FlmgnG6iihEF+iLljom7x21PW6g1s9BcZclHIqVo4Yal0tO6Z277S T6T+koRk2QTDzte+bGPTU1M= -----END CERTIFICATE-----Generated at Wed Jul 22 02:35:25 2026 by rpki-client